search

raboof / sbt-reproducible-builds

Make your published artifacts bit-by-bit reproducible, and compare with other certifications
Apache License 2.0
36 stars 4 forks source link

Dependency on sbt-assembly refers to an old version #248

Closed julienrf closed 1 year ago

julienrf commented 1 year ago

While investigating which packages of the Scala ecosystem depend on artifacts published to the sbt community repository (see this discussion), I’ve noticed that this project depends on old versions of sbt-assembly, which are not available on Maven Central.

See the reference here:

https://github.com/raboof/sbt-reproducible-builds/blob/396a34753f5a8e101997021a2d05c2c38a436452/build.sbt#L36

I recommend bumping the dependency to use a version that is available on Maven Central.

raboof commented 1 year ago

Happy to! I'm surprised scala-steward didn't propose this update yet, perhaps we should teach it to?